Fixes:
- Fix possible NPEs in
TrivyAnalysisTask- apiserver/#4671 - Analyze all components of a project at once instead of in batches - apiserver/#4673
- Fix notification webhook sending blank header - apiserver/#4680
- Fix local file inclusion via notification templates - apiserver/#4685 / GHSA-9582-88hr-54w3
- Fix policy violation tab indicators being populated incorrectly - frontend/#1172
- Fix wrong policy violation tab indicator visibility conditions - frontend/#1175
For a complete list of changes, refer to the respective GitHub milestones:
We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.
Special thanks to everyone who contributed code to implement enhancements and fix defects:
@LennartC
dependency-track-apiserver.jar
| Algorithm | Checksum |
|---|---|
| SHA-1 | f59a0777e631a6bd4e4dc7b42c3df2ac9e8ce4d8 |
| SHA-256 | 4196b1eb91cb27304a53a0b897f0ffb766e3f49607094880618b480ce9ee3124 |
dependency-track-bundled.jar
| Algorithm | Checksum |
|---|---|
| SHA-1 | be4ed743244851cd47873cbbb6c065f0c2eace9d |
| SHA-256 | e036fc1bd0d0914f421307a59911cb7cab1ba158599b125e404a4a3079e6ea26 |
frontend-dist.zip
| Algorithm | Checksum |
|---|---|
| SHA-1 | 118b6fe222bb7192ca15610dd9c0481f055f93b4 |
| SHA-256 | d3cb53bccb46f20f735ac8716e147d6e99bf7a028ecb492b63aa3718167595ff |